mitre/sandcat external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mitre/sandcat

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mitre/sandcat)

Close

mitre / sandcatView on GitHubMore

• External links
• Readme badge

A CALDERA plugin

☆74Feb 16, 2026Updated 2 weeks ago

Alternatives and similar repositories for sandcat

Users that are interested in sandcat are comparing it to the libraries listed below

• mitre / stockpile

  View on GitHub
  A CALDERA plugin
  ☆81Feb 17, 2026Updated 2 weeks ago
• mitre / gocat

  View on GitHub
  Simplified go-cat agent for caldera
  ☆11Dec 18, 2023Updated 2 years ago
• mitre / adversary

  View on GitHub
  A CALDERA plugin
  ☆18Jul 28, 2020Updated 5 years ago
• SewellDinG / ReverseShellCheatsheet

  View on GitHub
  🔨Reverse Shell 备忘录
  ☆16Apr 2, 2020Updated 5 years ago
• mitre / caltack

  View on GitHub
  Plugin that serves the ATT&CK website alongside CALDERA.
  ☆12Feb 24, 2020Updated 6 years ago
• OTRF / sigma

  View on GitHub
  Generic Signature Format for SIEM Systems
  ☆14Oct 27, 2021Updated 4 years ago
• Octoberfest7 / Proxy_Egress_Persistence

  View on GitHub
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆34Sep 15, 2022Updated 3 years ago
• TrexSec / RLSB

  View on GitHub
  RLSB技术又称大数据区块链黑客技术 基于区块链5.0超融合一体机加云端全防御技术特殊恶意字符
  ☆11Apr 27, 2023Updated 2 years ago
• xenoscr / atomiccaldera

  View on GitHub
  A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…
  ☆73Oct 14, 2021Updated 4 years ago
• NextronSystems / thor-manual

  View on GitHub
  THOR APT Scanner User Manual
  ☆20Jan 30, 2026Updated last month
• JumpsecLabs / CloudflareRedirector

  View on GitHub
  Putting the C2 in C2loudflare
  ☆18Jun 28, 2024Updated last year
• NotMedic / SocksLauncher

  View on GitHub
  ☆14Oct 25, 2019Updated 6 years ago
• mitre / atomic

  View on GitHub
  A MITRE Caldera plugin
  ☆49Oct 6, 2025Updated 4 months ago
• mitre / training

  View on GitHub
  A CALDERA plugin
  ☆27Feb 24, 2026Updated last week
• threatexpress / edc

  View on GitHub
  Event Data Collector
  ☆39Jan 12, 2026Updated last month
• rbmm / SDD2

  View on GitHub
  Self delete DLL (2)
  ☆14Feb 15, 2024Updated 2 years ago
• mitre / human

  View on GitHub
  Caldera plugin to deploy "humans" to emulate user behavior on systems
  ☆31Apr 26, 2024Updated last year
• mitre / emu

  View on GitHub
  This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
  ☆34Oct 7, 2025Updated 4 months ago
• intelforge / tmc

  View on GitHub
  Threat Mapping Catalogue
  ☆18Aug 10, 2021Updated 4 years ago
• yeti-platform / pyeti

  View on GitHub
  Python bindings for Yeti's API
  ☆19Sep 12, 2023Updated 2 years ago
• SecurityRiskAdvisors / sra-taxii2-server

  View on GitHub
  TAXII 2.0 Server implemented in Node JS with MongoDB backend
  ☆12Jan 3, 2023Updated 3 years ago
• audibleblink / xordump

  View on GitHub
  ☆18Aug 15, 2021Updated 4 years ago
• MythicAgents / scarecrow_wrapper

  View on GitHub
  ☆22Jun 9, 2025Updated 8 months ago
• rvrsh3ll / SharpExcel4-DCOM

  View on GitHub
  Port of Invoke-Excel4DCOM
  ☆104Oct 12, 2019Updated 6 years ago
• FalconForceTeam / SysWhispers2BOF

  View on GitHub
  Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs
  ☆125May 24, 2022Updated 3 years ago
• checkymander / CoreSploit

  View on GitHub
  Initial Commit of Coresploit
  ☆57Oct 12, 2021Updated 4 years ago
• jheise / threatcmd

  View on GitHub
  Cli interface to threatcrowd.org
  ☆20Jul 6, 2017Updated 8 years ago
• jfmaes / Ansible-EmpireSuite

  View on GitHub
  ansible roles to download and install empire (BC-Security),deathstar(byt3bl33der) and starkiller (BC-Security)
  ☆24May 8, 2022Updated 3 years ago
• mitre / access

  View on GitHub
  A CALDERA plugin
  ☆26Oct 6, 2025Updated 4 months ago
• djhohnstein / HookDetector

  View on GitHub
  Playing with PE's and Building Structures by Hand
  ☆22Apr 21, 2022Updated 3 years ago
• usiegl00 / tamatoa

  View on GitHub
  If you have any questions, please open an issue.
  ☆25Apr 6, 2022Updated 3 years ago
• boku7 / xPipe

  View on GitHub
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆94Mar 8, 2023Updated 2 years ago
• Acheron-VAF / Vulnerability-Assessment-Framework

  View on GitHub
  ☆12Feb 16, 2017Updated 9 years ago
• BlackOfWorld / Windows-Native

  View on GitHub
  A wrapper around Windows, calls explicitly the lowest possible calls
  ☆14Jan 19, 2023Updated 3 years ago
• shantanu561993 / DLL-Sideload

  View on GitHub
  ☆43Jan 2, 2023Updated 3 years ago
• OTRF / OSSEM-DM

  View on GitHub
  OSSEM Detection Model
  ☆183Oct 11, 2022Updated 3 years ago
• matterpreter / SHAPESHIFTER

  View on GitHub
  Companion PoC for the "Adventures in Dynamic Evasion" blog post
  ☆129May 25, 2021Updated 4 years ago
• kyleavery / Multi-Stage-Mythic

  View on GitHub
  ☆27Aug 8, 2021Updated 4 years ago
• hasherezade / libpeconv_and_detours_tpl

  View on GitHub
  A template for projects using both libPeConv and MS Detours
  ☆16Oct 5, 2025Updated 4 months ago